Privacy Policy

Indigenus is the concierge service of Egnazia Iniziative Turistiche s.r.l. for journeys in Puglia. This page explains how we process the personal data of people who visit indigenus.it and of those who write to us through the contact form.

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). It applies only to this website, not to other websites you may reach through links.

Data controller

The controller is Egnazia Iniziative Turistiche s.r.l., with registered office at Via Claudio Monteverdi, 16 — Rome. For any question about your personal data, write to [email protected] or call +39 080 225 5532.

What this website is for

The site presents the Indigenus way, the territories, the journeys and shared moments, and lets you start a conversation with us. It is not a hotel booking engine and it does not collect payment data.

What we collect

Browsing data. The systems that run the site automatically record technical data implied by internet protocols: IP address, date and time of the request, page requested, browser and operating system. We do not use these data to identify you. They allow us to deliver pages, keep the site secure and, in aggregate form, check that it works. They may be used to establish liability in the event of cybercrime.

Contact form. If you complete the form on Start your journey, you send us: your name, email address, who you will share the journey with, the territory you have in mind, and your message. These are the details we need in order to understand you and reply.

Emails you send us. If you write to [email protected] or another address shown on the site, we keep the sender’s address and the contents of the message so that we can respond.

We do not ask for credit cards, postal addresses or identity documents through this website. There is no newsletter sign-up.

Why we process them

• To reply to your enquiry and, if you wish, begin shaping a journey together — legal basis: Art. 6.1.b GDPR (pre-contractual steps at your request).
• To send the confirmation email that your message has arrived — same basis.
• To operate and protect the site — legal basis: Art. 6.1.f GDPR (legitimate interest in the security and proper functioning of the service).

Form data are not used for marketing, promotions or newsletters. If we ever wished to do so, we would ask for a separate, unticked consent.

Who we share them with

Data are not disclosed to the public. They are handled only by authorised staff of Egnazia Iniziative Turistiche s.r.l. and by the providers we need to run the site, appointed as processors where required:

• Vercel Inc. — hosting and site functions;
• Sanity — editorial content management (site copy and images, not contact-form messages);
• Resend — sending notification and confirmation emails.

The site also loads a typeface from Google Fonts. In that request, your IP address may be visible to Google.

Some of these providers may process data outside the European Economic Area, in particular in the United States. In that case the transfer takes place on the basis of an adequacy decision of the European Commission (including, where applicable, the EU-US Data Privacy Framework) or standard contractual clauses and supplementary measures. We no longer rely on Privacy Shield, which was invalidated in 2020.

How long we keep them

Browsing data remain in logs for the technical time needed to run and secure the site, then are deleted or anonymised.

Contact-form and enquiry email data are kept for as long as needed to handle the request and any relationship that follows, and in any event no longer than 24 months after the last contact, unless a contract is formed or the law requires a longer period.

Whether you have to provide them

You can browse the site without giving us your name. Name and email on the form are required for us to reply: without them we cannot fulfil the request. The other fields are optional, but they help us understand the journey you have in mind.

Cookies

This website does not use cookies, neither profiling nor technical. There is no consent banner because we do not set any. Links to Instagram or other external sites remain subject to those services’ own policies.

Your rights

You may ask the controller for access, rectification, erasure, restriction, portability and, where applicable, object to processing. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights, write to [email protected].

Children

The site is intended for people aged 16 or over. We do not knowingly collect data from children. If you believe a child has written to us, please tell us and we will delete the data.

Updates

This notice may change. The version published on this page at the time you use the site is the one that applies.